Cohort HTB

Cohort is a Linux-based Hack The Box machine that focuses on web application testing, internal service enumeration, WebSocket security, and Linux privilege escalation. The box requires careful investigation of a URL-validation feature, discovery of services that are not directly exposed, and analysis of an internal notebook application before progressing to full system compromise. Cohort (cohort.htb) is an easy Linux machine centred on a web application and the services hiding behind it. Only SSH, HTTP and HTTPS are exposed, so everything starts with the website, and with understanding how one of its features talks to other systems on your behalf. The box is a good exercise in looking past what is directly reachable: carefully testing how the application validates user-supplied URLs, mapping services that only listen internally, discovering virtual hosts, and identifying exactly which software and version is running before choosing an approach. A browser-based developer tool plays a central role. Skills practiced: request analysis with Burp Suite, filter-bypass thinking, internal port and service enumeration, virtual host discovery, WebSocket traffic, reverse shells, and Linux privilege-escalation enumeration with tools such as LinPEAS. The full step-by-step walkthrough unlocks on this page as soon as the machine retires. This writeup is currently locked because the machine is still active on the Hack The Box platform. As per HTB policy, public writeups for active machines are not allowed. To avoid policy violations and potential account restrictions, this writeup will remain locked until the machine is retired. Once retired, the full writeup will be automatically unlocked and made available.

Difficulty: Easy · OS: linux · Category: HTB